agentplane 0.2.16 → 0.2.18

package/dist/cli/shared/ansi.js

@@ -0,0 +1,19 @@
+export function stripAnsi(text) {
+    if (!text)
+        return "";
+    let out = "";
+    for (let i = 0; i < text.length; i += 1) {
+        const ch = text.codePointAt(i);
+        if (ch === 27 && text[i + 1] === "[") {
+            i += 2;
+            while (i < text.length && text[i] !== "m")
+                i += 1;
+            continue;
+        }
+        out += text[i] ?? "";
+    }
+    return out;
+}
+export function visibleLen(text) {
+    return stripAnsi(text).length;
+}

package/dist/commands/block.run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"block.run.d.ts","sourceRoot":"","sources":["../../src/commands/block.run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IACpE,KAAK,UAAU,EAAE,GAAG,WAAW,KAAG,OAAO,CAAC,MAAM,CAAC,CAmBhE"}
+{"version":3,"file":"block.run.d.ts","sourceRoot":"","sources":["../../src/commands/block.run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IACpE,KAAK,UAAU,EAAE,GAAG,WAAW,KAAG,OAAO,CAAC,MAAM,CAAC,CAoBhE"}

package/dist/commands/block.run.js

@@ -16,6 +16,7 @@ export function makeRunBlockHandler(getCtx) {
             commitRequireClean: p.commitRequireClean,
             confirmStatusCommit: p.confirmStatusCommit,
             force: p.force,
+            yes: p.yes,
             quiet: p.quiet,
         });
     };

package/dist/commands/block.spec.d.ts

@@ -11,6 +11,7 @@ export type BlockParsed = {
     commitRequireClean: boolean;
     confirmStatusCommit: boolean;
     force: boolean;
+    yes: boolean;
     quiet: boolean;
 };
 export declare const blockSpec: CommandSpec<BlockParsed>;

package/dist/commands/block.spec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"block.spec.d.ts","sourceRoot":"","sources":["../../src/commands/block.spec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAKvD,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,WAAW,CAmH9C,CAAC"}
+{"version":3,"file":"block.spec.d.ts","sourceRoot":"","sources":["../../src/commands/block.spec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAKvD,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,WAAW,CA0H9C,CAAC"}

package/dist/commands/block.spec.js

@@ -78,6 +78,12 @@ export const blockSpec = {
             default: false,
             description: "Override status transition restrictions.",
         },
+        {
+            kind: "boolean",
+            name: "yes",
+            default: false,
+            description: "Auto-approve force-action approval checks when required.",
+        },
         { kind: "boolean", name: "quiet", default: false, description: "Suppress output." },
     ],
     examples: [
@@ -110,6 +116,7 @@ export const blockSpec = {
         commitRequireClean: raw.opts["commit-require-clean"] === true,
         confirmStatusCommit: raw.opts["confirm-status-commit"] === true,
         force: raw.opts.force === true,
+        yes: raw.opts.yes === true,
         quiet: raw.opts.quiet === true,
     }),
 };

package/dist/commands/branch/remove.command.d.ts

@@ -3,6 +3,7 @@ export type BranchRemoveParsed = {
     branch: string | null;
     worktree: string | null;
     force: boolean;
+    yes: boolean;
     quiet: boolean;
 };
 export declare const branchRemoveSpec: CommandSpec<BranchRemoveParsed>;

package/dist/commands/branch/remove.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remove.command.d.ts","sourceRoot":"","sources":["../../../src/commands/branch/remove.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAK1E,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,kBAAkB,CAkD5D,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,cAAc,CAAC,kBAAkB,CAS9D,CAAC"}
+{"version":3,"file":"remove.command.d.ts","sourceRoot":"","sources":["../../../src/commands/branch/remove.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAK1E,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,kBAAkB,CAyD5D,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,cAAc,CAAC,kBAAkB,CAU9D,CAAC"}

package/dist/commands/branch/remove.command.js

@@ -18,6 +18,12 @@ export const branchRemoveSpec = {
             description: "Worktree path to remove (relative to repo root or absolute).",
         },
         { kind: "boolean", name: "force", default: false, description: "Force deletion." },
+        {
+            kind: "boolean",
+            name: "yes",
+            default: false,
+            description: "Auto-approve force-action approval checks when required.",
+        },
         { kind: "boolean", name: "quiet", default: false, description: "Reduce output noise." },
     ],
     examples: [
@@ -48,6 +54,7 @@ export const branchRemoveSpec = {
         branch: typeof raw.opts.branch === "string" ? raw.opts.branch : null,
         worktree: typeof raw.opts.worktree === "string" ? raw.opts.worktree : null,
         force: raw.opts.force === true,
+        yes: raw.opts.yes === true,
         quiet: raw.opts.quiet === true,
     }),
 };
@@ -58,6 +65,7 @@ export const runBranchRemove = async (ctx, p) => {
         branch: p.branch ?? undefined,
         worktree: p.worktree ?? undefined,
         force: p.force,
+        yes: p.yes,
         quiet: p.quiet,
     });
 };

package/dist/commands/branch/remove.d.ts

@@ -4,6 +4,7 @@ export declare function cmdBranchRemove(opts: {
     branch?: string;
     worktree?: string;
     force: boolean;
+    yes?: boolean;
     quiet: boolean;
 }): Promise<number>;
 //# sourceMappingURL=remove.d.ts.map

package/dist/commands/branch/remove.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remove.d.ts","sourceRoot":"","sources":["../../../src/commands/branch/remove.ts"],"names":[],"mappings":"AAWA,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CA4DlB"}
+{"version":3,"file":"remove.d.ts","sourceRoot":"","sources":["../../../src/commands/branch/remove.ts"],"names":[],"mappings":"AAYA,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoElB"}

package/dist/commands/branch/remove.js

@@ -3,6 +3,7 @@ import { loadConfig, resolveProject } from "@agentplaneorg/core";
 import { mapCoreError } from "../../cli/error-map.js";
 import { successMessage, unknownEntityMessage } from "../../cli/output.js";
 import { CliError } from "../../shared/errors.js";
+import { ensureActionApproved } from "../shared/approval-requirements.js";
 import { execFileAsync, gitEnv } from "../shared/git.js";
 import { gitBranchExists } from "../shared/git-ops.js";
 import { isPathWithin, resolvePathFallback } from "../shared/path.js";
@@ -22,6 +23,14 @@ export async function cmdBranchRemove(opts) {
             rootOverride: opts.rootOverride ?? null,
         });
         const loaded = await loadConfig(resolved.agentplaneDir);
+        if (opts.force) {
+            await ensureActionApproved({
+                action: "force_action",
+                config: loaded.config,
+                yes: opts.yes === true,
+                reason: "branch remove --force",
+            });
+        }
         if (worktree) {
             const worktreePath = path.isAbsolute(worktree)
                 ? await resolvePathFallback(worktree)

package/dist/commands/doctor.run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.run.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.run.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAoKrD,eAAO,MAAM,SAAS,EAAE,cAAc,CAAC,YAAY,CAuBlD,CAAC"}
+{"version":3,"file":"doctor.run.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.run.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAI1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA+OrD,eAAO,MAAM,SAAS,EAAE,cAAc,CAAC,YAAY,CAwBlD,CAAC"}

package/dist/commands/doctor.run.js

@@ -2,6 +2,7 @@ import fs from "node:fs/promises";
 import path from "node:path";
 import { resolveProject } from "@agentplaneorg/core";
 import { warnMessage, successMessage } from "../cli/output.js";
+import { execFileAsync, gitEnv } from "./shared/git.js";
 import { loadCommandContext } from "./shared/task-backend.js";
 async function listTsFiles(rootDir) {
     const out = [];
@@ -150,10 +151,76 @@ async function safeFixTaskIndex(repoRoot) {
         return { changed: false, note: "Skip: could not rebuild tasks index cache." };
     }
 }
+async function checkDoneTaskCommitInvariants(repoRoot) {
+    const tasksPath = path.join(repoRoot, ".agentplane", "tasks.json");
+    let raw = "";
+    try {
+        raw = await fs.readFile(tasksPath, "utf8");
+    }
+    catch {
+        return [];
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return [`Invalid JSON snapshot: ${path.relative(repoRoot, tasksPath)}`];
+    }
+    const all = Array.isArray(parsed.tasks) ? parsed.tasks : [];
+    const done = all.filter((t) => {
+        const status = typeof t.status === "string" ? t.status : "";
+        return status.toUpperCase() === "DONE";
+    });
+    if (done.length === 0)
+        return [];
+    const problems = [];
+    const hashes = new Set();
+    for (const task of done) {
+        const id = typeof task.id === "string" ? task.id : "<unknown>";
+        const hash = typeof task.commit?.hash === "string" ? task.commit.hash.trim() : "";
+        if (!hash) {
+            problems.push(`DONE task is missing implementation commit hash: ${id} (finish with --commit <hash>).`);
+            continue;
+        }
+        hashes.add(hash);
+    }
+    if (hashes.size === 0)
+        return problems;
+    const subjectByHash = new Map();
+    for (const hash of hashes) {
+        try {
+            const { stdout } = await execFileAsync("git", ["show", "-s", "--format=%s", hash], {
+                cwd: repoRoot,
+                env: gitEnv(),
+            });
+            subjectByHash.set(hash, String(stdout ?? "").trim());
+        }
+        catch {
+            subjectByHash.set(hash, "");
+        }
+    }
+    for (const task of done) {
+        const id = typeof task.id === "string" ? task.id : "<unknown>";
+        const hash = typeof task.commit?.hash === "string" ? task.commit.hash.trim() : "";
+        if (!hash)
+            continue;
+        const subject = subjectByHash.get(hash) ?? "";
+        if (!subject) {
+            problems.push(`DONE task references unknown commit hash: ${id} -> ${hash}`);
+            continue;
+        }
+        if (/\bclose:/iu.test(subject)) {
+            problems.push(`DONE task implementation commit points to a close commit: ${id} -> ${hash} (${subject})`);
+        }
+    }
+    return problems;
+}
 export const runDoctor = async (ctx, p) => {
     const resolved = await resolveProject({ cwd: ctx.cwd, rootOverride: ctx.rootOverride ?? null });
     const repoRoot = resolved.gitRoot;
     const problems = await checkWorkspace(repoRoot);
+    problems.push(...(await checkDoneTaskCommitInvariants(repoRoot)));
     if (p.dev) {
         problems.push(...(await checkLayering(repoRoot)));
     }

package/dist/commands/finish.run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"finish.run.d.ts","sourceRoot":"","sources":["../../src/commands/finish.run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,OAAO,EAAc,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEjE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IACrE,KAAK,UAAU,EAAE,GAAG,YAAY,KAAG,OAAO,CAAC,MAAM,CAAC,CAmCjE"}
+{"version":3,"file":"finish.run.d.ts","sourceRoot":"","sources":["../../src/commands/finish.run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,OAAO,EAAc,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEjE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IACrE,KAAK,UAAU,EAAE,GAAG,YAAY,KAAG,OAAO,CAAC,MAAM,CAAC,CAoCjE"}

package/dist/commands/finish.run.js

@@ -22,6 +22,7 @@ export function makeRunFinishHandler(getCtx) {
             breaking: p.breaking,
             commit: p.commit,
             force: p.force,
+            yes: p.yes,
             commitFromComment: p.commitFromComment,
             commitEmoji: p.commitEmoji,
             commitAllow: p.commitAllow,

package/dist/commands/finish.spec.d.ts

@@ -8,6 +8,7 @@ export type FinishParsed = {
     breaking: boolean;
     commit?: string;
     force: boolean;
+    yes: boolean;
     commitFromComment: boolean;
     commitEmoji?: string;
     commitAllow: string[];

package/dist/commands/finish.spec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"finish.spec.d.ts","sourceRoot":"","sources":["../../src/commands/finish.spec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAKvD,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,YAAY,EAAE,OAAO,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,wBAAwB,EAAE,OAAO,CAAC;IAClC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,WAAW,CAAC,YAAY,CAsMhD,CAAC"}
+{"version":3,"file":"finish.spec.d.ts","sourceRoot":"","sources":["../../src/commands/finish.spec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAKvD,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;IACb,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,YAAY,EAAE,OAAO,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,wBAAwB,EAAE,OAAO,CAAC;IAClC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,WAAW,CAAC,YAAY,CA6MhD,CAAC"}

package/dist/commands/finish.spec.js

@@ -54,6 +54,12 @@ export const finishSpec = {
             description: "Commit hash to record on the task (optional).",
         },
         { kind: "boolean", name: "force", default: false, description: "Force finish despite gates." },
+        {
+            kind: "boolean",
+            name: "yes",
+            default: false,
+            description: "Auto-approve force-action approval checks when required.",
+        },
         {
             kind: "boolean",
             name: "commit-from-comment",
@@ -176,6 +182,7 @@ export const finishSpec = {
         breaking: raw.opts.breaking === true,
         commit: raw.opts.commit,
         force: raw.opts.force === true,
+        yes: raw.opts.yes === true,
         commitFromComment: raw.opts["commit-from-comment"] === true,
         commitEmoji: raw.opts["commit-emoji"],
         commitAllow: toStringList(raw.opts["commit-allow"]),

package/dist/commands/guard/impl/commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../../../src/commands/guard/impl/commands.ts"],"names":[],"mappings":"AAGA,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAMvF,OAAO,EAAoB,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAExE,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBlB;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CAyBlB;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAS9E;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAgIlB"}
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../../../src/commands/guard/impl/commands.ts"],"names":[],"mappings":"AAGA,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAMvF,OAAO,EAAoB,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAyDxE,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBlB;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CAyBlB;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAS9E;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkIlB"}

package/dist/commands/guard/impl/commands.js

@@ -7,6 +7,53 @@ import { suggestAllowPrefixes } from "./allow.js";
 import { buildCloseCommitMessage, taskReadmePathForTask } from "./close-message.js";
 import { buildGitCommitEnv } from "./env.js";
 import { guardCommitCheck } from "./policy.js";
+function readText(value) {
+    if (typeof value === "string")
+        return value;
+    if (Buffer.isBuffer(value))
+        return value.toString("utf8");
+    return "";
+}
+function summarizeOutput(raw) {
+    const lines = raw
+        .replaceAll("\r\n", "\n")
+        .split("\n")
+        .map((line) => line.trimEnd())
+        .filter((line) => line.trim().length > 0)
+        .map((line) => (line.length > 180 ? `${line.slice(0, 180)} [truncated]` : line));
+    if (lines.length <= 12)
+        return lines;
+    const head = lines.slice(0, 6);
+    const tail = lines.slice(-6);
+    return [...head, `[${lines.length - 12} lines omitted]`, ...tail];
+}
+function asCommitFailure(err) {
+    if (err instanceof Error) {
+        const e = err;
+        const cmd = typeof e.cmd === "string" ? e.cmd : "";
+        if (cmd.startsWith("git commit")) {
+            const output = [readText(e.stderr), readText(e.stdout)]
+                .filter((part) => part.length > 0)
+                .join("\n");
+            const summary = summarizeOutput(output);
+            const code = typeof e.code === "number" ? e.code : null;
+            const lines = ["git commit failed (hook or commit policy).", `command: ${cmd}`];
+            if (typeof code === "number") {
+                lines.push(`exit_code: ${code}`);
+            }
+            if (summary.length > 0)
+                lines.push("output_summary:");
+            lines.push(...summary.map((line) => `  ${line}`));
+            return new CliError({
+                exitCode: 5,
+                code: "E_GIT",
+                message: lines.join("\n"),
+            });
+        }
+        return null;
+    }
+    return null;
+}
 export async function cmdGuardClean(opts) {
     try {
         const ctx = await loadCommandContext({
@@ -186,6 +233,9 @@ export async function cmdCommit(opts) {
     catch (err) {
         if (err instanceof CliError)
             throw err;
+        const commitFailure = asCommitFailure(err);
+        if (commitFailure)
+            throw commitFailure;
         throw mapCoreError(err, { command: "commit", root: opts.rootOverride ?? null });
     }
 }

package/dist/commands/guard/impl/comment-commit.js

@@ -18,7 +18,7 @@ function deriveCommitMessageFromComment(opts) {
             message: "Comment body is required to build a commit message from the task comment",
         });
     }
-    const summary = raw.replace(/^(start|blocked|verified):\s+/i, "").trim();
+    const summary = raw.replace(/^(start|blocked|verified):\s*/i, "").trim();
     if (!summary) {
         throw new CliError({
             exitCode: 2,

package/dist/commands/release/apply.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apply.command.d.ts","sourceRoot":"","sources":["../../../src/commands/release/apply.command.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAS1E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,OAAO,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AA0KnD,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,kBAAkB,CAwE5D,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,cAAc,CAAC,kBAAkB,CA+H9D,CAAC"}
+{"version":3,"file":"apply.command.d.ts","sourceRoot":"","sources":["../../../src/commands/release/apply.command.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAU1E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,OAAO,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAyQnD,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,kBAAkB,CAwE5D,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,cAAc,CAAC,kBAAkB,CAyJ9D,CAAC"}

package/dist/commands/release/apply.command.js

@@ -1,11 +1,12 @@
-import { readFile, writeFile, readdir } from "node:fs/promises";
+import { readFile, writeFile, readdir, mkdir } from "node:fs/promises";
 import path from "node:path";
-import { resolveProject } from "@agentplaneorg/core";
+import { resolveProject, loadConfig } from "@agentplaneorg/core";
 import { usageError } from "../../cli/spec/errors.js";
 import { exitCodeForError } from "../../cli/exit-codes.js";
 import { CliError } from "../../shared/errors.js";
 import { execFileAsync, gitEnv } from "../shared/git.js";
 import { GitContext } from "../shared/git-context.js";
+import { ensureNetworkApproved } from "../shared/network-approval.js";
 async function fileExists(p) {
     try {
         await readFile(p, "utf8");
@@ -154,6 +155,74 @@ async function maybeUpdateBunLockfile(gitRoot) {
         });
     }
 }
+async function ensureCleanTrackedTree(gitRoot) {
+    const { stdout } = await execFileAsync("git", ["status", "--short", "--untracked-files=no"], {
+        cwd: gitRoot,
+        env: gitEnv(),
+        maxBuffer: 10 * 1024 * 1024,
+    });
+    const dirty = String(stdout ?? "")
+        .split(/\r?\n/u)
+        .map((line) => line.trimEnd())
+        .filter((line) => line.length > 0);
+    if (dirty.length === 0)
+        return;
+    throw new CliError({
+        exitCode: exitCodeForError("E_GIT"),
+        code: "E_GIT",
+        message: "Release apply requires a clean tracked working tree.\n" +
+            `Found tracked changes:\n${dirty.map((line) => `  ${line}`).join("\n")}`,
+    });
+}
+async function ensureTagDoesNotExist(gitRoot, tag) {
+    try {
+        await execFileAsync("git", ["rev-parse", "-q", "--verify", `refs/tags/${tag}`], {
+            cwd: gitRoot,
+            env: gitEnv(),
+        });
+        throw new CliError({
+            exitCode: exitCodeForError("E_GIT"),
+            code: "E_GIT",
+            message: `Tag already exists: ${tag}`,
+        });
+    }
+    catch (err) {
+        const code = err?.code;
+        if (code !== 1)
+            throw err;
+    }
+}
+async function ensureNpmVersionsAvailable(gitRoot, version) {
+    const scriptPath = path.join(gitRoot, "scripts", "check-npm-version-availability.mjs");
+    try {
+        await execFileAsync("node", [scriptPath, "--version", version], {
+            cwd: gitRoot,
+            env: process.env,
+            maxBuffer: 10 * 1024 * 1024,
+        });
+    }
+    catch (err) {
+        const details = String(err?.stderr ?? "").trim();
+        throw new CliError({
+            exitCode: exitCodeForError("E_VALIDATION"),
+            code: "E_VALIDATION",
+            message: `Pre-publish npm check failed for version ${version}. ` +
+                "Ensure this version is not already published for @agentplaneorg/core and agentplane." +
+                (details ? `\n\n${details}` : ""),
+        });
+    }
+}
+async function writeReleaseApplyReport(gitRoot, report) {
+    const runId = new Date().toISOString().replaceAll(":", "-").replaceAll(".", "-");
+    const dir = path.join(gitRoot, ".agentplane", ".release", "apply");
+    await mkdir(dir, { recursive: true });
+    const reportPath = path.join(dir, `${runId}.json`);
+    const latestPath = path.join(dir, "latest.json");
+    const text = `${JSON.stringify(report, null, 2)}\n`;
+    await writeFile(reportPath, text, "utf8");
+    await writeFile(latestPath, text, "utf8");
+    return reportPath;
+}
 export const releaseApplySpec = {
     id: ["release", "apply"],
     group: "Release",
@@ -276,6 +345,21 @@ export const runReleaseApply = async (ctx, flags) => {
         });
     }
     const git = new GitContext({ gitRoot });
+    await ensureCleanTrackedTree(gitRoot);
+    await ensureTagDoesNotExist(gitRoot, plan.nextTag);
+    let npmVersionChecked = false;
+    if (flags.push) {
+        const loaded = await loadConfig(resolved.agentplaneDir);
+        await ensureNetworkApproved({
+            config: loaded.config,
+            yes: flags.yes,
+            reason: "release apply --push validates npm version availability and pushes over network",
+            interactive: Boolean(process.stdin.isTTY),
+        });
+        await ensureNpmVersionsAvailable(gitRoot, plan.nextVersion);
+        npmVersionChecked = true;
+    }
+    let releaseCommit = null;
     if (coreVersion === plan.prevVersion) {
         await Promise.all([
             replacePackageVersionInFile(corePkgPath, plan.nextVersion),
@@ -308,23 +392,11 @@ export const runReleaseApply = async (ctx, flags) => {
     else {
         const subject = `✨ release: ${plan.nextTag}`;
         await git.commit({ message: subject, env: cleanHookEnv() });
-    }
-    // Create tag (idempotency: refuse to overwrite).
-    try {
-        await execFileAsync("git", ["rev-parse", "-q", "--verify", `refs/tags/${plan.nextTag}`], {
+        const { stdout: headHash } = await execFileAsync("git", ["rev-parse", "HEAD"], {
             cwd: gitRoot,
             env: gitEnv(),
         });
-        throw new CliError({
-            exitCode: exitCodeForError("E_GIT"),
-            code: "E_GIT",
-            message: `Tag already exists: ${plan.nextTag}`,
-        });
-    }
-    catch (err) {
-        const code = err?.code;
-        if (code !== 1)
-            throw err;
+        releaseCommit = { hash: String(headHash ?? "").trim(), subject };
     }
     await execFileAsync("git", ["tag", plan.nextTag], { cwd: gitRoot, env: gitEnv() });
     process.stdout.write(`Release tag created: ${plan.nextTag}\n`);
@@ -339,5 +411,24 @@ export const runReleaseApply = async (ctx, flags) => {
     else {
         process.stdout.write(`Next: git push <remote> HEAD && git push <remote> ${plan.nextTag}\n`);
     }
+    const reportPath = await writeReleaseApplyReport(gitRoot, {
+        applied_at: new Date().toISOString(),
+        plan_dir: path.relative(gitRoot, planDir),
+        notes_path: path.relative(gitRoot, notesPath),
+        prev_version: plan.prevVersion,
+        next_version: plan.nextVersion,
+        prev_tag: plan.prevTag,
+        next_tag: plan.nextTag,
+        bump: plan.bump,
+        checks: {
+            clean_tracked_tree: true,
+            tag_absent: true,
+            notes_validated: true,
+            npm_version_available_checked: npmVersionChecked,
+        },
+        commit: releaseCommit,
+        push: { requested: flags.push, remote: flags.remote, performed: flags.push },
+    });
+    process.stdout.write(`Release report: ${path.relative(gitRoot, reportPath)}\n`);
     return 0;
 };

package/dist/commands/shared/approval-requirements.d.ts

@@ -0,0 +1,18 @@
+import type { AgentplaneConfig } from "@agentplaneorg/core";
+export type ApprovalAction = "network_access" | "force_action" | "policy_write" | "config_write" | "dangerous_fs" | "git_push";
+export type ApprovalRequirement = {
+    required: boolean;
+    reason: string;
+};
+export declare function getApprovalRequirements(opts: {
+    config: AgentplaneConfig;
+    action: ApprovalAction;
+}): ApprovalRequirement;
+export declare function ensureActionApproved(opts: {
+    action: ApprovalAction;
+    config: AgentplaneConfig;
+    yes: boolean;
+    reason: string;
+    interactive?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=approval-requirements.d.ts.map

package/dist/commands/shared/approval-requirements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-requirements.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/approval-requirements.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAK5D,MAAM,MAAM,cAAc,GACtB,gBAAgB,GAChB,cAAc,GACd,cAAc,GACd,cAAc,GACd,cAAc,GACd,UAAU,CAAC;AAEf,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAmCF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,cAAc,CAAC;CACxB,GAAG,mBAAmB,CAkCtB;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,gBAAgB,CAAC;IACzB,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBhB"}

package/dist/commands/shared/approval-requirements.js

@@ -0,0 +1,77 @@
+import { promptYesNo } from "../../cli/prompts.js";
+import { CliError } from "../../shared/errors.js";
+function resolveEffectiveApprovals(config) {
+    const approvals = config.agents?.approvals;
+    const base = {
+        require_plan: approvals?.require_plan === true,
+        require_network: approvals?.require_network === true,
+        require_verify: approvals?.require_verify === true,
+        // Backward-compatible with older @agentplaneorg/core typings where require_force is absent.
+        require_force: approvals?.require_force === true,
+    };
+    if (config.execution.profile === "conservative") {
+        return {
+            ...base,
+            require_network: true,
+            require_force: true,
+        };
+    }
+    return base;
+}
+export function getApprovalRequirements(opts) {
+    const effectiveApprovals = resolveEffectiveApprovals(opts.config);
+    switch (opts.action) {
+        case "network_access": {
+            const required = effectiveApprovals.require_network === true;
+            return {
+                required,
+                reason: "Network access requires explicit approval",
+            };
+        }
+        case "force_action": {
+            return {
+                required: effectiveApprovals.require_force === true,
+                reason: "Force action requires explicit approval",
+            };
+        }
+        case "policy_write": {
+            return { required: false, reason: "Policy writes require explicit approval" };
+        }
+        case "config_write": {
+            return { required: false, reason: "Config writes require explicit approval" };
+        }
+        case "dangerous_fs": {
+            return { required: false, reason: "Potentially dangerous file operations require approval" };
+        }
+        case "git_push": {
+            return { required: false, reason: "Git push requires explicit approval" };
+        }
+        default: {
+            const exhaustive = opts.action;
+            return exhaustive;
+        }
+    }
+}
+export async function ensureActionApproved(opts) {
+    const req = getApprovalRequirements({ config: opts.config, action: opts.action });
+    if (!req.required)
+        return;
+    if (opts.yes)
+        return;
+    const interactive = opts.interactive ?? Boolean(process.stdin.isTTY);
+    if (!interactive) {
+        throw new CliError({
+            exitCode: 3,
+            code: "E_VALIDATION",
+            message: `${req.reason} (pass --yes): ${opts.reason}`,
+        });
+    }
+    const approved = await promptYesNo(`Allow ${opts.action}? ${opts.reason}`, false);
+    if (!approved) {
+        throw new CliError({
+            exitCode: 3,
+            code: "E_VALIDATION",
+            message: `${req.reason} denied: ${opts.reason}`,
+        });
+    }
+}

package/dist/commands/shared/network-approval.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"network-approval.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/network-approval.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAK5D,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,MAAM,EAAE,gBAAgB,CAAC;IACzB,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBhB"}
+{"version":3,"file":"network-approval.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/network-approval.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAI5D,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,MAAM,EAAE,gBAAgB,CAAC;IACzB,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQhB"}